Top all-time · #2528
CTurt
Personal blog · cturt.github.iosecuritysystemshardware
CTurt is a personal blog at cturt.github.io about security, systems and hardware. Since 2015, 30 different Hacker News readers have linked it 32 times, most often “Shogihax – Remote Code Execution on Nintendo 64 Through Morita Shogi 64”. No feed was found, so read it on the site itself.
Too few sampled comments (13) to say how often HN recommends it.?
Why HN links it
HN readers link CTurt's blog for reverse-engineering writeups on console hacking, including PS4 exploits and FreeBSD kernel details, PS2 and N64 exploits, and a GameBoy emulator overview.
Summarised by Claude from a sample of 13 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Shogihax – Remote Code Execution on Nintendo 64 Through Morita Shogi 645 people · 5 mentions · first linked 2020-05-03
- /ps4.html4 people · 4 mentions · first linked 2015-12-30
- Writing a Game Boy emulator4 people · 4 mentions · first linked 2018-07-10
- FreeDVDBoot – Hacking the Playstation 2 through its DVD player4 people · 4 mentions · first linked 2020-06-27
- Reverse Engineering and Modding Mario Pinball Land (GBA)3 people · 3 mentions · first linked 2020-04-11
- Hacking the PS4 / PS5 Through the PS2 Emulator – Part 22 people · 2 mentions · first linked 2022-09-15
What Hacker News says?
https://cturt.github.io/cinoop.html Basic overview of a GameBoy emulator. Far cry from the complexities of a Switch, but still a great writeup by cturt.
Comment linking /cinoop.html
on “Yuzu (Nintendo Switch Emulator) Progress Report January 2021”Submitted Writing a Game Boy emulator as a story · 243 points
HN discussionSome of this has been covered in other blogs: https://cturt.github.io/ps4.html
Comment linking /ps4.html
on “Fai0verflow: Linux on the PS4 [video]”Submitted Hacking the PS4 / PS5 Through the PS2 Emulator as a story · 210 points
HN discussionAnyone have a working link to part 2? The link at the bottom of the page [0] doesn't seem to work. [0] https://cturt.github.io/mast1c0re-2.html
Comment linking /mast1c0re-2.html
on “Hacking the PS4 / PS5 Through the PS2 Emulator”Submitted Analysis of PS4's security and the state of hacking as a story · 210 points
HN discussionPS3 did—I believe PS4 is not nearly as heavily modified[1]. It is certainly locked down though, at least after the early PS3s where you could, say, install Linux and build a HPC cluster[2]. 1. Mostly from people who've hacked it; https://cturt.github.io/ps4.html seems to suggest it's a relatively stock FreeBSD kernel with some added system calls and a possibly heavily modified NetBSD userland. 2. http://phys.org/new…
Comment linking /ps4.html
on “FreeBSD 10.3”Submitted FreeDVDBoot – Hacking the Playstation 2 through its DVD player as a story · 169 points
HN discussionThese two articles are probably relevant and come from the same person: 1. http://cturt.github.io/ps4.html 2. http://cturt.github.io/ps4-2.html They cover pretty much every question about the WebKit exploit and this open-source SDK.
Comment linking /ps4-2.html
on “Open-source Playstation 4 SDK”Submitted PS4 security article follow up as a story · 92 points
HN discussion> PS2 Emotion Engine Ghidra is very useful for reverse engineering video games and all related technology! There are blogs showing how to do it: https://cturt.github.io/pinball.html
Comment linking /pinball.html
on “IDA Home is coming”Submitted Hacking the PS4, part 3: Kernel exploitation as a story · 66 points
HN discussionJails are used on the Playstation 4 and with some 36 Million PS4s sold so far that's a huge use of jails in production. Here's a quote from an article talking about it, "We can prove the existence of FreeBSD jails being actively used in the PS4's kernel through the auditon system call being impossible to execute within a jailed environment" This quote is from: https://cturt.github.io/ps4.html
Comment linking /ps4.html
on “Abusing Privileged and Unprivileged Linux Containers”Submitted Shogihax – Remote Code Execution on Nintendo 64 Through Morita Shogi 64 as a story · 3 points
HN discussionIf you're interested in learning more about ROP, I highly recommend this fantastic writeup CTURT produced about hacking the PS4 (which, of course, used ROP). https://cturt.github.io/ps4.html I
Comment linking /ps4.html
on “Return-oriented programming-based CSGO, BF3, BF4 cheat”Submitted Reverse Engineering and Modding Mario Pinball Land (GBA) as a story · 2 points
HN discussionhttps://cturt.github.io/cinoop.html https://news.ycombinator.com/item?id=17496859
Comment linking /cinoop.html
on “Euphrates: A Sega Game Console Emulator”Submitted Analysis of CVE-2016-1887, sendmsg FreeBSD kernel heap overflow as a story · 2 points
HN discussionhttps://cturt.github.io/freedvdboot.html I think this explains it. I've been using free mcboot on a memory card with hard disc games for years. I never knew burnt dvds where possible without mod chip
Comment linking /freedvdboot.html
on “Burning and Playing PS2 Games Without a Modded Console”Submitted Reverse Engineering and Modding Mario Pinball Land (GBA) as a story · 1 points
HN discussionhttps://cturt.github.io/freedvdboot.html tldr; out of bounds payload on the dvd player
Comment linking /freedvdboot.html
on “Burning and Playing PS2 Games Without a Modded Console”Submitted FreeDVDBoot – Hacking the Playstation 2 through its DVD player (2020) as a story · 1 points
HN discussionIf this is true then it's a real bummer. Jailbreaking tends to pave the way for a lot of bad things. Rampant piracy and multiplayer cheating will totally bork the playstation ecosystem. Edit: I dug into this a little bit and it doesn't seem beyond the realm of possibility that this is credible. A little more info (though no smoking gun) can be found at the tweeters GitHub page http://cturt.github.io/articles.html
Comment linking /articles.html
on “PlayStation 4 jailbroken”Submitted Hacking the PS4 / PS5 Through the PS2 Emulator – Part 2 as a story · 1 points
HN discussionThis shogi game for the N64 included network hardware in the cartridge (see photo below) for online play. Unfortunately it also allowed arbitrary remote code execution. https://twitter.com/sdhizumi/status/1274594780899500032?s=21 Exploit homepage: https://cturt.github.io/shogihax.html (Dear mods, the link above and its title might be better for this submission.)
Comment linking /shogihax.html
on “Nintendo 64 Shogi Game Network Vulnerability”Submitted Cinoop: Writing a Game Boy Emulator as a story · 1 points
HN discussionSubmitted Remote Code Execution on Nintendo 64 as a story · 1 points
HN discussionSubmitted Shogihax – Remote Code Execution on Nintendo 64 Through Morita Shogi 64 as a story · 1 points
HN discussionSubmitted Remote code execution on Nintendo 64 through Morita Shogi 64 as a story · 1 points
HN discussionSubmitted Analysis of CVE-2016-1886, SETFKEY FreeBSD Kernel Vulnerability as a story · 1 points
HN discussion
